DisclosureLens
HackingHealthcareHealthcareCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumResolved

Central Florida Cardiology Group

bd_8bd6f2365824c9dc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 8, 2020

Filed

Dec 15, 2020

To disclose

10 weeks

Affected · nationwide

2,8172 in this filing

Linked

3 filings

Confidence

50%
Full breach record for Central Florida Cardiology Group →2 incidents on file

Central Florida Cardiology Group, a healthcare organization, reported an external system breach (hacking) that occurred on February 1, 2020, and was discovered on October 8, 2020. The breach affected 2,817 individuals in total, including 2 Maine residents. The compromised data included names and financial account numbers or credit/debit card numbers along with their security codes or PINs. The company provided written notification to affected consumers on December 11, 2020, and offered complimentary credit monitoring and theft protection for at least 12 months.

Maine clockDiscovered Oct 8, 2020 → Filed with AG Dec 15, 202068d ⏱ ME AG >30d10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 250 days
discovery → filing · 10 weeks / 68 days

Feb 1, 2020

Begins

Oct 8, 2020

Discovered

Dec 15, 2020

Filed

vs. sector median

2 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
HHS OCRDec 7 · first
Indiana State AG+4d
Maine State AG+8d · this page

Pattern: first filing Dec 7 (FL), last Dec 15 (ME) — a 8-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.